Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
File: Te9bj_uvfVavXTny-UyUbXL3cPM.mft (raw, json)
Hash identifier: ARTrenk6d0hULuoY350FjX/p2qMfGRWytxXpH2PQ+is=
Subject key identifier: 73:03:DC:EA:69:7C:62:01:37:62:B1:20:87:B9:96:E0:60:AF:5C:28
Authority key identifier: 4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
Certificate issuer: /CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Certificate serial: 0199FE7E26C44422395193E775F1BAA5DE94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
Manifest number: 135B
Signing time: Sun 19 Oct 2025 22:01:44 +0000
Manifest this update: Sun 19 Oct 2025 22:01:44 +0000
Manifest next update: Mon 20 Oct 2025 22:01:44 +0000
Files and hashes: 1: C0P7fdeMbUq_SUkoUNzucceRO_o.roa (hash: IOK/1252dBZyKN3aeAn78pq+rzDgEYZNrHyoRwRIUaA=)
2: Te9bj_uvfVavXTny-UyUbXL3cPM.crl (hash: ymyPTcUzM2wDr0cgoNaCZ0xTpKlHbSd/30K50vPDt04=)
3: a1f2RcCwBt9bPHww1QitG1PQubM.roa (hash: SAUWVRAb+b0RAh7fSmAkBAsYks5uXo8G20Pv9xs5FYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:26:c4:44:22:39:51:93:e7:75:f1:ba:a5:de:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4def5b8ffbaf7d56af5d39f2f94c946d72f770f3
Validity
Not Before: Oct 19 22:01:44 2025 GMT
Not After : Oct 20 22:01:44 2025 GMT
Subject: CN=7303dcea697c62013762b12087b996e060af5c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:77:87:6e:23:13:97:30:1c:1c:de:cc:79:
90:1c:9a:18:b3:f1:65:e6:5e:1c:27:1b:66:e4:c6:
a6:f7:65:1a:74:b4:05:a0:8b:69:2f:01:42:7c:1a:
9a:36:66:cb:e6:65:f7:52:d0:e0:71:d2:f2:2f:08:
0e:7d:28:3e:ed:20:0a:c8:2a:14:77:f7:4e:f4:13:
3a:1c:cb:d5:f2:b2:d7:3c:a2:e5:c4:46:d7:6b:84:
b1:19:0a:a4:72:59:4c:aa:02:49:82:5a:a7:ea:a8:
6d:a0:e5:35:ce:aa:60:23:bf:ab:e4:2a:31:ad:47:
75:63:2a:70:ea:17:10:25:d8:79:9f:31:b3:2b:49:
ba:e7:08:bd:d5:e2:eb:b1:6e:de:58:41:4b:c6:27:
c7:b5:63:8a:e2:91:cd:fb:c4:2d:d4:7e:d2:ae:b7:
e7:c1:cc:e3:23:fb:01:3b:59:d2:e0:12:d3:45:5f:
17:d5:ab:28:aa:47:40:67:c9:b7:36:57:da:06:81:
18:c7:13:c5:3d:c4:af:62:d2:87:55:a7:f8:a7:c1:
b7:52:77:df:2b:bf:e8:2a:53:7b:1b:6e:ba:76:49:
bc:c9:e7:63:0f:52:40:98:91:fb:a7:54:bf:cd:39:
c0:09:fc:b3:01:5e:be:0f:02:aa:f2:61:20:ba:25:
94:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:DC:EA:69:7C:62:01:37:62:B1:20:87:B9:96:E0:60:AF:5C:28
X509v3 Authority Key Identifier:
keyid:4D:EF:5B:8F:FB:AF:7D:56:AF:5D:39:F2:F9:4C:94:6D:72:F7:70:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Te9bj_uvfVavXTny-UyUbXL3cPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/40427e-74fa-4a66-837d-a523bacdc2be/1/Te9bj_uvfVavXTny-UyUbXL3cPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fd:0e:5b:71:3a:79:00:0a:2d:d8:ab:3a:ee:76:81:64:19:
f9:96:1a:1d:22:30:6e:73:ff:46:98:2f:90:74:9e:40:e6:99:
fb:71:db:0a:0e:ad:ca:4f:92:98:a3:d2:42:cb:24:50:66:e9:
a5:09:4c:0a:ef:69:f7:fe:90:fd:ed:8e:49:c2:fa:ad:56:1b:
4b:33:b0:c0:53:a9:8a:0f:4f:c6:66:7a:be:07:8e:a5:74:fc:
5a:78:ba:c0:df:71:92:5f:5e:94:d1:23:55:44:d6:8e:e4:29:
2a:27:a1:e9:3f:03:f0:8c:a6:e9:6d:46:64:48:87:a8:4b:59:
4b:c9:3e:d8:36:3f:c3:48:6d:68:1d:f1:3b:98:17:4b:3f:b9:
1d:9a:df:80:fb:81:3c:8b:03:41:a2:a9:a9:14:b3:74:07:52:
47:a3:4c:86:3a:f3:c8:dd:cc:17:62:97:81:38:9e:de:b1:a2:
a8:39:66:ae:a4:27:af:3e:f2:11:24:a0:72:ea:e8:75:b1:94:
af:1d:46:d5:47:d0:4b:ee:e7:5f:4b:72:82:e4:5d:65:3e:5f:
82:34:4e:9b:7e:7e:5a:b0:0d:23:b1:49:fb:d2:aa:68:4e:37:
b7:15:b7:6f:c8:d3:81:75:40:6c:56:c5:1e:80:5d:31:81:eb:
23:b9:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:46 2025 by rpki-client